Security Management Systems
Requirements for security and resilience management systems providing a framework to establish, implement, maintain, and improve security management across supply chain and operational contexts.
ISO 28000 specifies requirements for security and resilience management systems applicable to any organisation in its supply chain. The 2022 revision aligns the standard with Annex SL, significantly expanding its scope from supply chain security to broader organisational security management.
The standard addresses threats ranging from terrorism and piracy to fraud, theft, and environmental incidents. It applies to logistics companies, port operators, shipping lines, freight forwarders, and any organisation with security-sensitive supply chain activities.
ACI-certified auditors assess security management system design and the effectiveness of security risk treatments, evaluating both physical and operational security controls.
Attend an ACI-Approved Training Provider (ATP) course for your chosen grade level. ACI-approved courses are aligned to the examination syllabus for ISO 28000.
Examinations are administered exclusively through ACI Approved Training Providers. Foundation and Internal Auditor examinations require 70% to pass; Lead Auditor requires 65%.
Submit your application through the ACI portal with your examination result, training certificate, and relevant audit experience log. Upon approval you receive your ACI Card ID and digital certificate.
Available Grades for ISO 28000
All six ACI auditor grades are available for this scheme. Each grade has defined competence, experience, and examination requirements.
Entry-level certification for those beginning their auditing career. Suitable for individuals who have completed foundation training but have limited audit experience.
For auditors who have completed Internal Auditor training and have begun accumulating audit experience under supervision or in an internal audit role.
Full auditor grade for practitioners with demonstrated audit experience. Recognised as a competent independent auditor of management systems.
Senior grade for experienced auditors capable of leading audit teams and managing full audit programmes. The most widely recognised auditor grade internationally.
Advanced grade for highly experienced auditors demonstrating sustained performance in complex audit environments and contributions to the auditing profession.
The highest ACI designation, awarded to individuals who have made an exceptional contribution to the management system auditing profession and to the ACI community.
Find an Approved Training Provider, sit the examination, and submit your application to ACI.